wedmeymarsp[.]exe[.]mal | Triage

Sharing

General

Target

wedmeymarsp.exe.mal
Size

699KB
MD5

875b5af7b5c56f1913978cc8f535a114
SHA1

ce7a41a32572853b609f781e87d99634b9e7a00f
SHA256

3f65f8e74e4ced282a3f46df38dc2550abedf3ffebf6d523386902680905a865
SHA512

9c60ac8ae33ab71ee7b62c451bfbf44ad8918ba7398f1691bb4b759fd901dec3c8fa39848a45b5455de4756bba82f02e76ee9ea909431a9fa27c654b4dd70c9e
SSDEEP

12288:T0VZmK9yx3ASqzgWBYXP5KWcg3AstdkD+gF+G3f6zpjB4ejMp5OxL4SmaeS:oVDQ3ASAIP5Kg3AsTkSgryf4e/4Smae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wedmeymarsp.exe.mal

Files

wedmeymarsp.exe.mal
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 382KB - Virtual size: 381KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ